Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IS4FXWrs54nqsya1ZtJtZnzw8OE.roa
File:                     IS4FXWrs54nqsya1ZtJtZnzw8OE.roa (raw, json)
Hash identifier:          4JR+Lv5pMu1Tgttsxv6NuxHnuKDELo26oi34QpR2aeI=
Subject key identifier:   21:2E:05:5D:6A:EC:E7:89:EA:B3:26:B5:66:D2:6D:66:7C:F0:F0:E1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       229F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IS4FXWrs54nqsya1ZtJtZnzw8OE.roa
Signing time:             Fri 25 Nov 2022 04:41:25 +0000
ROA not before:           Fri 25 Nov 2022 04:41:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8863 (0x229f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=212E055D6AECE789EAB326B566D26D667CF0F0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:46:1e:57:81:cb:95:ed:59:c3:14:2b:68:
                    e4:79:b0:08:2a:f3:37:e8:11:a6:31:0a:e9:04:5f:
                    8c:33:86:66:5f:95:36:db:49:62:8f:5f:c8:e9:b1:
                    2f:1d:91:29:8a:5f:f5:69:28:e3:fd:7b:1a:53:58:
                    c7:b9:e7:ee:93:80:de:04:5b:1d:b8:c0:5e:7f:7c:
                    8d:62:30:e5:60:41:d3:3c:2d:52:23:65:f7:ba:35:
                    5a:13:52:c2:bb:ba:1b:c0:a1:89:1b:64:b2:fc:44:
                    ea:cd:ba:ed:e6:51:33:48:fe:24:58:59:b4:e1:4d:
                    58:bb:99:ad:37:16:87:13:51:1d:d6:a9:8d:22:0a:
                    b9:fb:25:7f:f4:30:7a:c3:3c:c9:ec:a9:f8:bf:9c:
                    a4:0f:e6:43:2a:9d:40:7f:2d:bf:16:b1:66:e3:21:
                    bb:9f:40:0a:cd:92:b8:55:64:1c:c1:74:61:81:9c:
                    61:0e:39:6b:9b:fd:53:c5:09:8f:80:f4:35:f4:5c:
                    6f:70:89:a2:59:c2:68:92:62:16:d3:9c:07:96:17:
                    78:59:2c:8b:b8:86:11:b7:4e:3e:0b:6c:57:af:c4:
                    8d:ae:ea:cb:df:f5:0a:cc:63:fd:d6:fc:6a:42:de:
                    36:18:06:57:d7:67:b1:97:b4:fb:29:49:2f:aa:76:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:05:5D:6A:EC:E7:89:EA:B3:26:B5:66:D2:6D:66:7C:F0:F0:E1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IS4FXWrs54nqsya1ZtJtZnzw8OE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:05:5a:05:aa:48:df:19:00:93:2b:f5:4d:2b:8f:d5:c6:4c:
         03:ee:2a:73:d3:f8:cd:a1:db:72:1b:fa:2f:b6:ab:ed:9f:c9:
         d9:8a:03:87:95:85:31:e2:ba:42:49:c8:3e:ec:fa:45:69:ab:
         cb:6e:6b:95:54:fb:20:90:e3:0c:b2:0d:ac:18:19:74:18:b9:
         dd:69:51:cb:c3:21:06:a1:fb:8e:9c:9c:a6:c7:23:4c:81:c8:
         4a:44:30:d5:2f:db:ff:6a:4f:e2:f8:47:3c:ab:76:84:3e:aa:
         0f:ae:3b:be:33:56:16:4b:61:5f:d7:c3:db:c4:ac:3c:ab:24:
         14:1b:fa:c9:6a:51:23:91:c0:6f:f5:74:78:a8:22:51:1c:5c:
         c4:06:93:8b:0a:5d:da:ff:c0:95:a1:6d:88:9f:33:bf:02:ee:
         91:f1:3a:17:4b:9f:36:a9:82:d7:2d:a2:11:ac:09:ea:c2:02:
         9f:1d:60:91:d8:df:f8:5b:42:c3:02:ca:62:5a:3a:0c:ee:dd:
         f6:ec:aa:fd:de:68:5c:04:ab:21:2b:81:18:d4:b9:1d:eb:ae:
         99:42:43:ef:dd:7c:c4:4e:d3:a0:ce:6b:75:ad:0f:5c:7d:18:
         c8:97:cd:7d:04:b5:c7:bf:d3:14:c3:91:50:23:08:55:8a:94:
         52:a2:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----